Agentic data science with the Data Agent Kit
cloud.google.com·6h ago
Security
Trail of Bits Blog·Aug 25·5 min read
State divergence enables unauthorized access
TL;DR
A critical bug in Provenance Blockchain allows any user to gain unauthorized admin control over marker accounts without needing tokens. This vulnerability affects 82 financial asset markers on the mainnet and impacts versions prior to 1.28.0.
✦ Why It Matters
Update Provenance Blockchain to version 1.28.0 or later to secure marker accounts against unauthorized access.
Key Takeaways
- Ensure access control checks reference live data, not stale fields.
- Implement explicit zero-guards in authorization checks.
- Document access-list authorization models to clarify rules.
- Use property-based testing to catch vulnerabilities early.
How It Works
The bug arose from the AddAccess message handler, which allowed any user with a zero balance to pass the authorization check for non-fixed supply markers. This was due to the check comparing a stale supply field that remained zero, making the condition trivially true.